Hosting

Custodo is hosted in Europe (France). DNS records and routing expose only what's needed for the application to run.

Isolation between organizations

Each organization only ever sees its own data. This isolation is enforced at the database level itself (PostgreSQL Row-Level Security), not just in the application code — even a poorly written query can't leak another organization's data.

Passwords and authentication

Passwords are hashed (never stored in plain text). Email/password login is available everywhere; login via Google is also available depending on your organization's configuration.

No commitment

Creating an organization doesn't require a credit card. You can stop using Custodo at any time.